From owner-freebsd-ports-bugs@FreeBSD.ORG Tue Nov 11 03:10:01 2008 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C2C481065670 for ; Tue, 11 Nov 2008 03:10:01 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 9F4B88FC12 for ; Tue, 11 Nov 2008 03:10:01 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id mAB3A1o7069307 for ; Tue, 11 Nov 2008 03:10:01 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id mAB3A1EG069306; Tue, 11 Nov 2008 03:10:01 GMT (envelope-from gnats) Resent-Date: Tue, 11 Nov 2008 03:10:01 GMT Resent-Message-Id: <200811110310.mAB3A1EG069306@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, "Mark D. Foster" Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DF9E01065673 for ; Tue, 11 Nov 2008 03:07:42 +0000 (UTC) (envelope-from mark@foster.cc) Received: from QMTA04.westchester.pa.mail.comcast.net (qmta04.westchester.pa.mail.comcast.net [76.96.62.40]) by mx1.freebsd.org (Postfix) with ESMTP id 886D98FC29 for ; Tue, 11 Nov 2008 03:07:42 +0000 (UTC) (envelope-from mark@foster.cc) Received: from OMTA14.westchester.pa.mail.comcast.net ([76.96.62.60]) by QMTA04.westchester.pa.mail.comcast.net with comcast id ddLn1a0051HzFnQ54exfdK; Tue, 11 Nov 2008 02:57:39 +0000 Received: from [192.168.1.9] ([24.17.96.78]) by OMTA14.westchester.pa.mail.comcast.net with comcast id dexQ1a00Z1hTbBL3aexSbq; Tue, 11 Nov 2008 02:57:27 +0000 Message-Id: <4918F49F.4050004@foster.cc> Date: Mon, 10 Nov 2008 18:57:35 -0800 From: "Mark D. Foster" To: FreeBSD-gnats-submit@FreeBSD.org Cc: Subject: ports/128771: vuxml update for security vulnerability: mail/imap_uw X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Nov 2008 03:10:01 -0000 >Number: 128771 >Category: ports >Synopsis: vuxml update for security vulnerability: mail/imap_uw >Confidential: no >Severity: serious >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Tue Nov 11 03:10:01 UTC 2008 >Closed-Date: >Last-Modified: >Originator: Mark Foster Release: FreeBSD 7.0-RELEASE-p3 i386 >Organization: >Environment: System: FreeBSD gomer.foster.dmz 7.0-RELEASE-p3 FreeBSD 7.0-RELEASE-p3 #6: Wed Aug 27 05:57:37 PDT 2008 root@gomer.foster.dmz:/usr/obj/usr/src/sys/GENERIC i386 >Description: >How-To-Repeat: >Fix: --- imap_uw.patch begins here --- --- vuln.xml.old 2008-11-11 02:07:56.000000000 -0800 +++ vuln.xml 2008-11-11 02:15:43.000000000 -0800 @@ -34,6 +34,33 @@ --> + + imap_uw -- "tmail" and "dmail" Local Buffer Overflow Vulnerabilities + + + imap_uw + 2007d + + + + +

SANS reports:

+
+

University of Washington "tmail" and "dmail" are mail deliver agents. "tmail" and "dmail" are exposed to local buffer overflow issues because they fail to perform adequate boundary checks on user-supplied data.

+
+ + + + + http://www.washington.edu/imap/documentation/RELNOTES.html + + + + 2008-10-29 + 2008-11-11 + + + trac -- potential DOS vulnerability --- imap_uw.patch ends here --- >Release-Note: >Audit-Trail: >Unformatted: